The Rietta Blog
Cybersecurity, software, and the law between them.
Since 2005, this blog has covered cybersecurity, software development, and cloud migration, a resource for anyone staying informed about these areas.
10/29/2019
Xfinity is Man-in-the-Middle (MITM) Attacking my Internet
by Alex Piechowski
Xfinity injected 581 lines of JavaScript into unencrypted traffic as a data-cap warning, creating MITM risks, accessibility failures, and slower loads.
Read More: Xfinity is Man-in-the-Middle (MITM) Attacking my Internet
10/28/2019
Patch Production Faster with Security-oriented Agile Development Practices
by Frank Rietta
Companies take too long to patch production leaving plenty of time for threats to attack! Here's how to fix it with security-oriented Agile practices.
Read More: Patch Production Faster with Security-oriented Agile Development Practices
10/24/2019
MySQL Decimal Data Type
by Alex Piechowski
The MySQL decimal (A.K.A. numeric) data type stores exact values with a fixed point decimal. The syntax of MySQL's decimal is "DECIMAL(precision, scale)".
10/22/2019
What is Web Accessibility?
by Christopher Choi
Answer the demand for accessible websites to avoid legal implications, now that the Supreme Court declined to hear the Domino's Pizza ADA appeal.
10/07/2019
Acknowledge Open-Source Contributors with Git Authorship
by Alex Piechowski
Git has dominated for over a decade, yet some popular open-source projects don't properly credit contributors, despite an ethical obligation to do so.
Read More: Acknowledge Open-Source Contributors with Git Authorship
10/02/2019
The Clean-up Refactor Deleting ".arel_tables"
by Alex Piechowski
ActiveRecord queries using .arel_table[] to select columns get long. Delegating arel_table[] to .[] gives a more readable interface without losing context.
09/25/2019
Why do Rietta Developers Git Fork?
by Christopher Choi
Forking is a standard way to contribute to open source projects. At Rietta, a small agency, all developers fork internal repositories for client projects.
09/06/2019
Ruby Gems Supply Chain Vulnerability
by Frank Rietta
Review of 2019 RubyGems supply chain attacks like bootstrap-sass and rest-client, plus typo-squatted gems, with 5 practical steps to protect your Rails project.
08/22/2019
The Case for 2FA, Post Rest-client Gem CVE
by Christopher Choi
On 08/19/2019, a CVE was found in the popular Ruby gem Rest-client. Though caught quickly, it raises the case for requiring 2FA on RubyGems and NPM accounts.
06/07/2019
What's the Difference Between the 3 Github Merge Methods?
by Christopher Choi
GitHub's interface makes merging commits versatile to suit your style of keeping a clean Git history. The three styles are Create Commit, Squash, and Rebase.
Read More: What's the Difference Between the 3 Github Merge Methods?